
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/hB2-RwcBJycpb4-pIgxofsIazqg.roa
File: hB2-RwcBJycpb4-pIgxofsIazqg.roa (raw, json)
Hash identifier: srUc2vdsQ3xLfiCqJPRSzrzrW+qT9nZMDrqoDmWJNqA=
Subject key identifier: 84:1D:BE:47:07:01:27:27:29:6F:8F:A9:22:0C:68:7E:C2:1A:CE:A8
Certificate issuer: /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial: 51
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/hB2-RwcBJycpb4-pIgxofsIazqg.roa
Signing time: Tue 31 Mar 2026 08:31:50 +0000
ROA not before: Tue 31 Mar 2026 08:31:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 37901
IP address blocks: 240b:10::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Validity
Not Before: Mar 31 08:31:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=841DBE4707012727296F8FA9220C687EC21ACEA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:02:5f:2f:60:63:20:cc:46:42:44:27:9b:56:
b6:98:9e:4e:1c:ae:66:b9:70:05:75:ef:ff:19:83:
5f:ef:ec:7f:2a:35:53:5d:5e:8a:fa:71:14:5f:14:
a4:68:cb:c9:0c:1c:d6:b7:34:d0:c1:db:2e:1b:c3:
77:e9:47:3e:6e:c5:f4:28:52:4a:a8:94:1e:cb:b3:
42:5a:2b:5c:b6:0c:14:8c:18:70:66:8f:d0:18:5e:
e4:1a:96:d0:2b:04:b2:0f:31:e4:f3:9e:3f:40:2c:
49:21:53:f4:2c:bf:e1:12:95:bf:52:9e:d1:ce:0a:
b7:d3:34:b0:57:b2:ea:77:54:11:f1:21:46:1b:91:
25:96:d5:77:18:e2:1a:35:43:7c:eb:6c:31:e5:da:
7e:9e:52:f2:de:16:bf:1f:a8:f3:db:4e:04:91:29:
10:7f:d5:19:3e:bc:65:e2:f1:d0:03:d8:56:0e:71:
81:2e:3f:d7:ce:dc:8a:f8:97:87:b1:94:15:1c:43:
dd:ef:dd:71:f3:9d:9a:8a:23:89:e6:40:ad:34:bb:
34:17:1b:16:5b:f0:45:7b:c2:3a:3d:09:e0:1a:0e:
5d:b1:37:6e:68:73:d6:12:13:00:ee:3b:ac:00:65:
c7:f3:3e:03:fe:a4:57:2d:73:b5:29:b8:f5:06:f8:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1D:BE:47:07:01:27:27:29:6F:8F:A9:22:0C:68:7E:C2:1A:CE:A8
X509v3 Authority Key Identifier:
keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/hB2-RwcBJycpb4-pIgxofsIazqg.roa
sbgp-ipAddrBlock: critical
IPv6:
240b:10::/32
Signature Algorithm: sha256WithRSAEncryption
6a:61:56:5e:6d:1c:b8:32:58:df:4d:95:20:c4:ec:40:fe:96:
8a:a8:96:cf:59:c5:9c:d4:ae:88:0f:5e:dc:11:b4:a2:59:3f:
53:7f:41:f7:3a:2a:f1:0f:1c:f1:69:0f:b1:f8:ed:80:cd:67:
4b:a3:76:df:a2:01:74:70:15:f6:40:81:f2:4b:5b:43:b9:36:
09:96:d7:b2:71:7c:cb:49:fd:ef:e3:5b:1c:3b:d0:f6:63:10:
fb:6b:44:6f:54:6c:90:dd:10:68:7a:80:89:57:f9:2a:c8:e2:
59:a8:b0:b6:f9:e4:81:69:1c:a9:bf:3c:9b:24:dd:cc:16:84:
e9:93:1e:62:71:96:5d:56:b7:67:7d:f2:9b:35:d7:49:ab:6c:
25:83:38:78:a1:89:19:5b:c3:30:10:d3:fe:42:ed:91:8b:7f:
57:a2:21:72:af:2f:80:8b:62:b2:92:2d:ad:73:ca:bc:7c:cf:
96:68:45:25:02:c7:a5:2a:85:16:16:5e:5a:a6:11:57:7c:e8:
3b:69:1d:a2:d3:60:31:e9:4c:21:cc:41:46:35:e4:d9:42:3a:
25:57:f1:32:2b:c6:c4:dc:6b:6d:a1:d7:22:b1:d7:a9:0f:94:
25:b0:9d:41:ee:2b:55:a7:51:68:db:b2:dd:e9:b8:2b:08:9f:
a6:96:6e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:54 2026 by rpki-client